Hello Pat, With the help by an local admin, this mystery is solved by adding this entry in /etc/yum.conf:
http_caching=packages If I understand this correctly, this entry will enable the software packages to be cached by the site web cache, but not the metadata. yum update now show the openssl updates. Thanks. Regards, Peter -----Original Message----- From: Chiu, Peter (STFC,RAL,RALSP) Sent: 08 April 2014 16:51 To: Pat Riehecky; [email protected] Cc: Chiu, Peter (STFC,RAL,RALSP) Subject: RE: [SCIENTIFIC-LINUX-USERS] OpenSSL Vulnerability Thanks, Pat, From a web browser, I can see the updates openssl-1.0.1e-16.el6_5.7.x86_64.rpm under: http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/ So your updates are there, but my yum installation could not reach them. I have tried: yum clean expire-cache; yum repolist still reports the errors: http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.bz2: [Errno -1] Metadata file does not match checksum Trying other mirror. http://ftp1.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.bz2 [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 Unknown" Trying other mirror. I did try yum clean metadata, no joy. I have also tried wget: [root@geant ~]# wget http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.bz --2014-04-08 16:45:08-- http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.bz Resolving wwwcache.rl.ac.uk... 130.246.132.179 Connecting to wwwcache.rl.ac.uk|130.246.132.179|:8080... connected. Proxy request sent, awaiting response... 404 Not Found 2014-04-08 16:45:08 ERROR 404: Not Found. Any idea? Peter -----Original Message----- From: Pat Riehecky [mailto:[email protected]] Sent: 08 April 2014 16:05 To: Chiu, Peter (STFC,RAL,RALSP); [email protected] Subject: Re: [SCIENTIFIC-LINUX-USERS] OpenSSL Vulnerability Hmmmm..... I'll run another fsync to make sure everything is down on disk. Can I have you run: yum clean expire-cache And try another yum check-update? Pat On 04/08/2014 10:00 AM, [email protected] wrote: > Hello Pat, > > Just tried yum clean all; yum repolist; yum check-update > > but not show for the latest OpenSSL fixes. > Is there a particular repository to use? > > Regards, > Peter > ==================================================== > [root@geant ~]# yum clean all; yum repolist; yum check-update Loaded > plugins: refresh-packagekit, security Cleaning repos: atrpms elrepo > epel rpmforge sl sl-security sl6x sl6x-security Cleaning up Everything > Loaded plugins: refresh-packagekit, security > atrpms > | 3.5 kB 00:00 > atrpms/primary_db > | 1.7 MB 00:00 > elrepo > | 2.9 kB 00:00 > elrepo/primary_db > | 612 kB 00:00 > epel/metalink > | 25 kB 00:00 > epel > | 4.4 kB 00:00 > epel/primary_db > | 6.0 MB 00:00 > rpmforge > | 1.9 kB 00:00 > rpmforge/primary_db > | 2.7 MB 00:00 > sl > | 3.6 kB 00:00 > sl/primary_db > | 4.1 MB 00:00 > sl-security > | 3.0 kB 00:00 > sl-security/primary_db > | 1.9 MB 00:00 > http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/sec > urity/repodata/primary.sqlite.z2: [Errno -1] Metadata file does not match > checksum Trying other mirror. > http://ftp1.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite > bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 > Unknown" > Trying other mirror. > http://ftp2.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite > bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 > Unknown" > Trying other mirror. > ftp://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/secu > rity/repodata/primary.sqlite.b 2: [Errno -1] Metadata file does not match > checksum Trying other mirror. > sl-security/primary_db > | 1.9 MB 00:00 > http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/sec > urity/repodata/primary.sqlite. z2: [Errno -1] Metadata file does not match > checksum Trying other mirror. > http://ftp1.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite > bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 > Unknown" > Trying other mirror. > http://ftp2.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite > bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 > Unknown" > Trying other mirror. > ftp://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/secu > rity/repodata/primary.sqlite.b 2: [Errno -1] Metadata file does not match > checksum Trying other mirror. > repo id repo name > statu > atrpms Red Hat Enterprise Linux 6.5 - x86_64 - ATrpms > 2,79 > elrepo ELRepo.org Community Enterprise Linux Repository - > el6 275 > epel Extra Packages for Enterprise Linux 6 - x86_64 > 10,681 > rpmforge RHEL 6.5 - RPMforge.net - dag > 4,678 > sl Scientific Linux 6.5 - x86_64 > 6,524 > sl-security Scientific Linux 6.5 - x86_64 - security updates > 0 > sl6x Scientific Linux 6x - x86_64 > 0 > sl6x-security Scientific Linux 6x - x86_64 - security updates > 0 > repolist: 24,954 > Loaded plugins: refresh-packagekit, security > sl-security/primary_db > | 1.9 MB 00:00 > http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/sec > urity/repodata/primary.sqlite.bz2: [Errno -1] Metadata file does not match > checksum Trying other mirror. > http://ftp1.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite. > bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 > Unknown" > Trying other mirror. > http://ftp2.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.bz2: > [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 Unknown" > Trying other mirror. > ftp://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/secu > rity/repodata/primary.sqlite.bz2: [Errno -1] Metadata file does not match > checksum Trying other mirror. > Error: failure: repodata/primary.sqlite.bz2 from sl-security: [Errno 256] No > more mirrors to try. > [root@geant ~]# > > > -----Original Message----- > From: Pat Riehecky [mailto:[email protected]] > Sent: 08 April 2014 15:10 > To: Adam Bishop; [email protected] > Subject: Re: [SCIENTIFIC-LINUX-USERS] OpenSSL Vulnerability > > The updated package should be available now. > > Pat > > On 04/08/2014 05:43 AM, Adam Bishop wrote: >> Good Morning, >> >> I’ve not seen a fixed OpenSSL package drop into the repo’s as of yet. >> >> Apologies for asking the question, but how quickly will this be packaged and >> made available (i.e. should I start building the package myself)? >> >> Regards, >> >> Adam Bishop >> Systems Development Specialist >> >> gpg: 0x6609D460 >> t: +44 (0)1235 822 245 >> xmpp: [email protected] >> >> Janet, the UK's research and education network. >> >> >> Janet(UK) is a trading name of Jisc Collections and Janet Limited, a >> not-for-profit company which is registered in England under No. >> 2881024 and whose Registered Office is at Lumen House, Library >> Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. >> 614944238 > > -- > Pat Riehecky > > Scientific Linux developer > http://www.scientificlinux.org/ -- Pat Riehecky Scientific Linux developer http://www.scientificlinux.org/
